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1). The gateway 28 links the private network 20 and the Internet 18 together. The gateway 28 
can also serve as or implement a firewall, e.g., with one or both of the proxying components 9 
12, 1 4 , between the networks 18, 20. 



Please replace the paragraph beginning at page 9, line 1^ 
with the following amended paragraph 

In another network arrangement 30 shown in FIG 3, the proxying components 9 12, 1 4 

can be implemented on the gateway 28 of the private network 20. This design requires that if the 

private network 20 uses an ISP that the ISP allow incoming connections to the private network 

20, but the gateway 28 may be provided as part of the ISP service. 
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The proxying components 9 12, 1 4 here act independently of any gateway or security 
protection, e.g., firewall, on the private network 20 and of any services provided by an ISP 
providing Internet access to the private network 20. (For clarity, no gateway or security 
protection is shown in FIG 1.) 



a, 

Please replace the paragraph beginning at page 7, line 1$ 
with the following amended paragraph: 

The proxying components 9 12, 1 4 sit between the remote networked client 16 

(technically, the client's browser or other network application) and the devices 22a-N within the 

private network 20. The proxying components 9 12, 1 4 can monitor and intercept any and all 

requests being sent to and/or received from the private network 20 and/or the Internet 18. The 

proxying components 9 12, 1 4 can also provide for client-to-private-network encryption. For 

example, by using HTTPS from the client 16 to \he server component 12 and from the agent 

component 14 to the server component 12 with a session key negotiated between the client 16 

and the agent component 14, data transmitted to and/or from the private network 20 is only 

exposed at the client 16 and in the private network 20. If the client 16 trusts and verifies the 

identity of the server component 12, then the connection between the client 16 and a device 22 

can be as secure as if the client 16 and the device 22 were directly communicating without any 

middlemen (the server component 12) in between. 



4/ 

Please replace the paragraph beginning at page 8, line L3 
with the following amended paragraph: 

The proxying components 9 12, 1 4 may be implemented in a number of ways. In a 
network arrangement 24 shown in FIG 2, the server component 12 can be implemented on an 
Internet-based server 26. The agent component 14 can be implemented on a gateway 28 of the 
private network 20 or on a personal computer 22a included in the private network 20 (see FIG 
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Amendments to the Specification : 

Please replace the paragraph beginning at page 2, line 23 
with the following amended paragraph: 

Referring to FIG 1, a network configuration 10 includes proxying components 12, 1 4 9 



that enable a remote networked client (or agent) 16 connected to an external network such as the 
Internet 18 to connect into a private network 20. The proxying components 9, which include the 
server component 1 2 and the agent component 14, can facilitate the establishment of logical 
connections between the client 16 and the devices 22a-22N in the private network 20. The agent 
component 14 can initiate a connection to the server component 12, and can keep the connection 
active. The client 16, via a network application, can establish a logical network connection to a 
device 22 included in the private network 20 by first establishing a physical network connection 
to the server component 12. The agent component 14 previously established a persistent 
physical connection to the server component 12, so any requests sent by the client 16 to the 
server component 12 can be routed by the server component 12 to the agent component 14. The 



agent component 14 knows through a software mechanism which of the devices 22a-N included 
in the private network 20 are listening for network connections, so the agent component 14 can 
determine if one of the listening devices 22 can handle the client's request. If so, then a logical 
connection between the client 16 and that listening device 22 is established and network packets 
may be routed between the client 16 and that listening device 22 as if the client 16 and that 
listening device 22 were directly connected with a physical network connection. i 



Please replace the paragraph beginning at page ^, line 
with the following amended paragraph: 
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